Software Notion

For practitioners in outpatient social services

Public early access planned for October 2026

Less administration. More time for families.

Focus Family brings preparation, appointment, documentation, time tracking and proof of activity together in one app – for supervised contact, family support, educational assistance and flexible help. Everything works fully offline, and case data is stored encrypted on your own device.

  • 100 % offline capable
  • Encrypted on the device
  • No account required
  • Self-hosted server, optional
Focus Family
100 % of features usable without internet
AES-256-GCM field-level encryption at rest
0 tracking, analytics or ad SDKs
6 platforms: iOS, iPadOS, Android, macOS, Windows, watchOS

What changes in everyday work

Field work in child and youth services means: driving, talking, listening – and afterwards writing everything down. Focus Family shortens exactly that second half without loosening a single requirement.

Documentation while it is still fresh

Time stamps during the appointment, guided follow-up right afterwards, text snippets and dictation instead of typing. The record is finished before the next front door.

One entry instead of three lists

Appointment, time entry, mileage and proof of activity come from the same record. No transferring into a spreadsheet, no second calendar, no paper form at the end of the month.

Ready for the youth welfare office

Proof of activity per case or per practitioner, with contact ratio, counter-signatures and checksum – exportable as PDF, XLSX or CSV, plus an invoice draft for billing.

Data protection you can explain

No vendor cloud, no mandatory account, no tracking. If you want team work, your organisation runs its own server – and keeps every key, every file and every log.

Data protection

Four rules that are not negotiable

Focus Family processes highly sensitive social data about families and minors. These four rules are written into the product, not into a marketing page.

Local first, always

The app works 100 % offline. All data lives primarily on the device – in a basement flat without reception just as well as in the office.

No vendor cloud

There is no Software Notion server that holds your case data. Synchronisation only ever happens against a server your organisation runs itself.

Always able to work

No server, no account and no connection are required for a working day. Your data stays on the device, readable, and is never deleted or locked away by us.

Privacy beats everything else

Where convenience and data protection collide, data protection wins: no readable field in the database and no back door to the PIN. With an organisation server, administrators reset the lock in the admin panel – logged, rather than circumvented.

The way you already work

The app follows the four steps of a home visit instead of forcing a new process on you.

1

Prepare

Before the appointment: the last record, open agreements and current goals on one screen – plus your own preparation note.

2

Accompany

During the appointment: start the timer, set short time stamps for observations, agreements and next steps, capture photos, video markers or a voice memo.

3

Follow up

Right after: four short questions, travel time and kilometres, optionally a signature from the family – and the time entry is created with a single tap.

4

Document

From your notes a clean record is written, filed in the case file and exported in the format the office expects.

Features

Every function in detail

Eight areas, one app. Everything below works without an internet connection; only sharing inside a team needs the organisation server.

Cases, people and households

A case is created with an alias – "Familie Nord" or "Fall 26-014" – so everyday work stays pseudonymous. Everything else builds on it.

  • File number, type of help, start and end, colour marker and archiving
  • People with roles, households, phone numbers and addresses – call or write straight from the app
  • Measures, institutions and cost bearers in a structured catalogue
  • Goals with sub-goals, progress log, predecessor goals and review points
  • Roadmap timeline: goal tracks, help plan meetings and recorded time against the approved quota
  • Approved hours quota per case with a live usage bar
Cases, people and households

Planning: appointments, series and tasks

Calendar and to-dos live on one screen. Overdue items first, then appointments and tasks grouped by day.

  • Appointment types: home visit, supervised contact, handover, help plan meeting, phone call and more
  • Recurring series – daily, weekly with weekdays and "every N weeks", or monthly; editing asks for this one, this and following, or the whole series
  • Location pre-filled from the case address, reminder minutes before, navigation with one tap
  • Tasks with due date, priority and case assignment; a red badge counts what is overdue
  • Optional sync with the device calendar – neutral or with case details
  • Deputising: hand a case to a colleague for a defined period, for example during holidays
Planning: appointments, series and tasks

Documentation in every form

Typing is the slowest option, so it is only one of many. Everything is stored encrypted inside the case.

  • Progress documentation with reusable text snippets – personal, team-wide or organisation-wide
  • Dictate instead of type: speech recognition runs on the device, nothing is uploaded
  • Photos and videos with time markers and notes – useful for Marte Meo work – plus cropping and annotation
  • Handwritten sketches for genograms, room plans or network maps, with lined, narrow-lined or squared paper and on-device handwriting recognition
  • Voice memos with optional offline transcript
  • Mark single entries as private: they stay on your own devices and never appear in the team or the admin panel
Documentation in every form

Electronic case file and forms

Every document belonging to a case in one place – imports, notes, forms, reports and proofs, each with verifiable metadata.

  • Fill in your organisation's PDF forms directly in the app, including signature fields
  • Document signatures from practitioners and legal guardians, captured on screen
  • File sheet with evidence data: version, checksum, timestamp and author
  • Text recognition for imported documents and photos, so scans become searchable
  • Free-text and handwritten notes filed straight into the case file
  • Sections such as contracts and consents, reports, proofs, imports and notes
Electronic case file and forms

Time tracking, proof of activity, billing

Time tracking has its own tab. A time entry is created from the appointment with a single tap – and grows into the document the office asks for.

  • Activity types for client contact, travel and documentation; contact category is derived automatically and can be corrected
  • Wording catalogue with ready-made phrases for upbringing, daily structure, stabilisation, social skills and network work – always available offline
  • Travel time and kilometres calculated from a stored starting address, only on your explicit action
  • Counter-signature by those concerned, on screen; what was signed is frozen and protected by a checksum
  • Proof of activity per case or per practitioner, per month, year or in total – with target/actual against the quota, contact ratio and signature rate
  • Export as PDF, XLSX or CSV, plus an invoice draft with cost bearer and line items
  • Team leads close past periods; closed entries are locked on every device and can only be reopened with a reason
Time tracking, proof of activity, billing

Export, reports and privacy cleansing

Every export contains sensitive case data. That is why the app asks what may leave the device before anything is shared.

  • Formats: PDF, DOCX, XLSX, CSV, JSON, ZIP bundle or an encrypted .ffexport package
  • Export profiles store recurring settings, for example "minimal data" with pseudonymisation
  • Privacy cleansing removes addresses, e-mail addresses and phone numbers, pseudonymises names and excludes internal notes or professional assessments
  • PDF preview and an editing view where marked text can be redacted – the content is replaced, not just covered
  • Period reports: pick a date range and the content types, and the app assembles contacts, agreements, goals, incidents and network contacts
  • Central DOCX templates and export profiles can be distributed by the organisation as a baseline
Export, reports and privacy cleansing

Offline AI assistant

The assistant runs entirely on the device. Your content never leaves it – there is no API call to any provider.

  • Helps to phrase documentation from your own notes and time stamps
  • Turns a voice memo transcript into a neutral draft record that you always review yourself
  • Gives non-binding professional and legal orientation around German child and youth services law (SGB VIII)
  • The model is chosen by the organisation in the admin panel; the app downloads it once
  • Switched off by default and can be disabled at any time
  • Not a diagnosis, not legal advice and never an assessment of a person
Offline AI assistant

App lock and everyday protection

A lost phone must not become a data breach. The protective measures are the same on phone, tablet and desktop.

  • App lock with a PIN of at least six digits, plus Face ID, Touch ID or the platform equivalent
  • Brute-force protection: three free attempts, then a waiting time that doubles up to roughly 85 minutes – it survives an app restart
  • Automatic lock after a chosen idle time and when returning from the app switcher
  • Screenshot protection and a hidden preview in the app switcher
  • Notifications can be limited to the case alias, so nothing readable appears on the lock screen
  • Forgot the PIN? With a connected server you can sign in with e-mail and password from the third failed attempt and set a new PIN; admins can also release the lock
App lock and everyday protection

One app, every screen you work on

Mobile in the field, desktop in the office, watch between two front doors – with the same data and the same protection everywhere.

iOS

The full app on iPhone, built for one-handed use during an appointment.

iPadOS

Adaptive multi-column layouts on iPad and sketching with Apple Pencil.

Android

Phone and tablet, including screenshot protection at operating-system level.

macOS

Desktop app with feature parity, keyboard search and a .pkg installer for Apple silicon and Intel.

Windows

The same desktop app as an MSI installer, distributable through the admin panel.

watchOS

Next appointments, running time, start and stop, and notes on Apple Watch – even without the iPhone nearby. Complications and Live Activity show the running appointment.

macOS
macOS & Windows
Apple Watch
Apple Watch
Apple Watch
Live Activity

Self-hosting

Self-hosted server and admin panel

Teams need shared cases. Focus Family solves that without a vendor cloud: your organisation runs one server instance in its own infrastructure, and the app synchronises only against that instance. The web admin panel is part of it.

Device

Encrypted SQLite database, works offline. Private entries never leave your own devices.

Your server

ASP.NET Core and PostgreSQL in containers, behind your own reverse proxy with your own TLS certificate.

No vendor cloud

Software Notion never receives case data. Only licence validation talks to an external service – without case content.

What the admin panel does

The panel is administration, not a second case documentation. The professional work stays in the app – administrators never see private entries, and technical administrators see no cases at all.

Overview

Users, teams, devices, cases, security events and storage at a glance, plus server version, organisation and instance ID.

Users and permissions

Two separate admin levels – technical and professional – plus fine-grained permissions. IT can maintain the system without ever seeing case content.

Devices and licence seats

Approve or block devices, reset a forgotten PIN lock, issue re-enrolment codes. Seats are assigned by an admin only – no device takes one by itself. Disconnecting a device happens here and nowhere else.

Organisation policies

Require MFA, require the app lock, set maximum offline duration, session length, sync interval, minimum client version, device approval and break-glass emergency access. Changes are versioned and distributed to every app.

Time tracking and proof of activity

Team leads correct entries inside their own area of responsibility, close past months or years and reopen them with a reason. Signatures are shown with a checksum indicator – a warning appears if image or summary was altered.

Security audit

A log of security-relevant actions with time, actor, action, target and result – who did what and when, never what a case contains.

Data protection and GDPR requests

A dedicated area for the data protection officer: subject access requests, deletion requests with a documented legal basis, restrictions under Art. 18 and objections under Art. 21, with a four-eyes release that small organisations can switch off.

Screenshots from the running app and the admin panel – with demonstration data, not real cases.

What operating it looks like

  • Containerised stack: Focus Family server, PostgreSQL and a ClamAV malware scanner, started with Docker Compose
  • TLS terminates at your own reverse proxy; nginx and Caddy examples are included
  • Schema migrations run as a separate one-shot service – the application itself never executes DDL
  • Backup and restore scripts ship with the stack; a deployment runbook covers clean install, update and restore
  • Uploads are size-limited and virus-scanned; in production the scanner fails closed
  • Blob contents are encrypted at rest on the server as well
  • Health checks, rate limiting, security headers, CSP and HSTS are configured out of the box

Honest limits

  • Whoever operates the server has direct database and file system access – that is true of every self-hosted system, and we say so
  • A compromised or rooted operating system on the device is outside the threat model
  • Files that have already been exported leave the protection of the app
  • Pseudonymisation in exports is not full anonymisation
  • Without a backup and without the backup password there is no recovery – there is deliberately no back door
Request an instance for your organisation

Data protection

Data protection, explained properly

Social data about families and minors belongs to the most sensitive category there is. Here is exactly what happens to it – in plain words, with the technical detail underneath.

Encrypted at rest

Every record is serialised and stored fully encrypted with AES-256-GCM. Only opaque index columns – GUIDs, ISO dates, status values – remain readable so the database can filter without decrypting. An automated test reads the raw database file and verifies that no plain text is inside.

Keys never leave the device

The 256-bit master key is generated by a cryptographic random generator and protected by the platform secure storage – iOS and macOS keychain, Android keystore, Windows DPAPI. On Android, automatic cloud backup of the key is disabled so it can never end up in a Google backup.

Password-protected backups

A .ffbackup file derives its key with PBKDF2-HMAC-SHA256 over 310,000 iterations and encrypts the payload with AES-256-GCM. Restoring validates the whole file before the first destructive step, so a wrong password never leaves half-overwritten data.

No tracking, no analytics

There are no analytics, tracking or advertising SDKs in the app. Network access happens for exactly two reasons: synchronisation with your own server and licence validation. Nothing else phones home.

Logs without content

Logs contain codes and identifiers instead of content. A redactor defensively masks e-mail addresses and phone numbers and truncates free text. No real names, notes, document contents or addresses are written to a log – and crash reports carry no case data at all.

Deletion goes through review

When a practitioner deletes data it is first only marked. The organisation decides: keep it with a documented legal basis, or delete it physically and irreversibly, leaving nothing but an empty deletion record.

MFA, passkeys and break-glass

The server supports two-factor authentication with TOTP and passwordless passkey sign-in. Emergency access to a case outside the regular assignment is time-boxed to at most 120 minutes, requires MFA and a documented reason, and is always written to the audit log.

Independently audited

Focus Family has been through several rounds of security audit. Findings were remediated and locked in with automated tests – including signed policy key sets, an offline access gate, a migration ledger and a production build gate.

Threat and countermeasure

Risk Countermeasure
Device lost or stolen App lock with PIN and biometrics, brute-force delay, field encryption at rest
Somebody reads the database file All sensitive fields encrypted with AES-256-GCM, verified by a test against the raw file
Shoulder surfing or the app switcher Screenshot protection and a covered app switcher preview
A backup is passed on Backups encrypted with PBKDF2 and AES-GCM; unreadable without the password
Data leaking through third-party SDKs No analytics, tracking or advertising SDKs; network access only for sync and licensing
Stolen sync credentials or devices Device registration with proof of possession, server-side revocation, disconnect only through the admin panel

Where the working time actually goes

Focus Family does not promise a percentage. It removes specific steps that cost time every single day – you can check each one against your own routine.

No transferring between systems

Appointment, time entry, kilometres and proof of activity all come from the same record. The monthly spreadsheet disappears.

Writing while you remember

Time stamps during the appointment and four guided questions afterwards replace the evening session in which you reconstruct three home visits.

Phrases you do not retype

The wording catalogue and your own text snippets cover the recurring sentences. Dictation handles the rest without a keyboard.

Reports at the push of a button

Proof of activity per case or practitioner, with target/actual, contact ratio and signature rate, exported as PDF, XLSX or CSV – instead of assembled by hand at the end of the month.

Preparation without searching

The last record, open agreements and current goals appear on one screen instead of being looked up in three folders.

Handover instead of a gap

Deputising hands a case over for a defined period, with access that starts and ends automatically. Holiday cover can be planned weeks in advance.

Focus Family supports practitioners in organising and documenting their work. The rules of your organisation and the applicable law remain authoritative. The app makes no diagnoses, takes no legal decisions and does not assess people.

Editions

Basic case documentation is free. Everything below is planned for the first public release; final pricing will be published before early access starts.

Free

For getting started

  • Cases, people, goals and review points
  • Planning with appointments, series and tasks
  • Documentation with photos, videos, sketches and voice memos
  • Time tracking with activity types and mileage
  • Encrypted local storage, app lock and backups
  • No licence reminders

Professional

For individual practitioners

  • Everything in the free edition
  • Offline AI assistant for phrasing and orientation
  • Advanced export: DOCX, XLSX, profiles and templates
  • Encrypted .ffexport packages for secure handover
  • Electronic case file with PDF forms and signatures
  • Subscription, cancellable at any time in your app account
Self-hosting

Organisation

For providers and teams

  • Everything in Professional for every seat
  • Self-hosted server with offline-first synchronisation
  • Web admin panel: users, permissions, teams, devices, policies
  • Shared cases, deputising and team text snippets
  • Proof of activity across the organisation, period closing and audit log
  • GDPR area for the data protection officer
  • Seat-based licensing with an offline grace period

Every edition keeps the same guarantees: no vendor cloud, no tracking and full offline operation. A paid licence only needs to be confirmed online from time to time – reminders start on day three, and on day ten the app asks for validation. Your data is never touched.

Where the project stands

App, desktop app, self-hosted server with admin panel and licence server are built and running. What is left is the public rollout.

  • Today

    Feature complete, in internal testing

    Version 1.0.0 on iOS, iPadOS, Android, macOS and Windows, with Apple Watch, server, admin panel and licensing. Several security audit rounds have been completed.

  • October 2026

    Public early access

    First public version in the app stores, together with the server package for organisations that want to run their own instance.

  • December 2026 / January 2027

    Final 1.0.0 release

    General availability after the feedback from early access has been worked in.

These dates are a planning estimate based on the current state of development, not a commitment. They can shift.

Manuals

Manuals as PDF

The complete documentation is written for people, not for administrators of a system. Everything can be downloaded, printed and passed on inside your organisation.

The manuals are published in German and English. Every download opens in a new tab.

User manual – app (iOS & Android)

Everything practitioners need on the phone and tablet: setup, cases, planning, documentation, case file, time tracking, export, backup and app lock.

Download PDF PDF · English

User manual – desktop (macOS & Windows)

The desktop app in detail: installation, keyboard shortcuts, documentation editor, time tracking and the differences from the mobile app.

Download PDF PDF · English

Admin manual (administration, team leads, DPO)

Roles and permissions, users, QR setup, MFA, teams, devices, policies, managed settings, proof of activity, audit log and the GDPR area.

Download PDF PDF · English

Technical manual (IT, hosting, operations)

For your IT department: container stack, database roles, reverse proxy, certificates, backup and restore, updates, monitoring and the security model.

Download PDF PDF · English

Questions organisations ask

Do we need a server?

No. The server is optional. Without it every practitioner works completely locally on their own device. You only need a server if cases are to be shared inside a team or if the organisation wants central administration.

Where is the data stored?

Primarily encrypted on the device. If you run a server, shared content additionally lives in your own PostgreSQL database on your own infrastructure. Software Notion never receives case data.

Can administrators read case content?

Technical administrators see no cases and no appointments at all. Professional administrators see case content within their responsibility, but never entries a practitioner has marked as private. Whoever operates the server does, of course, have database access – that is an honest limit of any self-hosted system.

What happens when there is no reception?

Nothing changes. Everything works offline, and synchronisation catches up automatically as soon as a connection exists. A paid licence only needs to reach the internet every few days.

How do practitioners get set up?

The admin creates the account in the panel and generates a time-limited one-time QR code. The practitioner scans it in the app, signs in, and the device waits for approval if your policy requires it.

Can a practitioner disconnect a device themselves?

No, deliberately not. Disconnecting only happens in the admin panel. That prevents a device from silently removing itself from central administration.

Is the AI assistant sending data anywhere?

No. The model runs on the device. There is no API call to any AI provider, and the assistant is switched off by default.

What does the migration from paper or Excel look like?

Cases are created in the app or in the panel; documents can be imported into the case file and become searchable through text recognition. Templates, export profiles and text snippets are maintained centrally so everyone starts from the same baseline.

Which languages are supported?

App, desktop app and admin panel are available in German, English, Spanish and French.

What does it cost to run the server?

The server runs on modest hardware – a small virtual machine with Docker is enough for a typical organisation. Licensing is seat-based; tell us your team size in the form below and you will get a concrete figure.

Contact

Run your own instance

Are you a provider, a youth welfare office or a team that wants to run the admin panel and its own server instance? Write to us – we will get back with the technical requirements, seat pricing and a possible timeline.

  • Technical requirements and a reference setup for your IT
  • Seat pricing for your team size
  • A guided test instance, if you would like to try before deciding
  • Support with data protection documentation and the processing record

Prefer e-mail? Write to info@software-notion.de – please mention Focus Family in the subject.

Bring Focus Family to your organisation

Tell us how many practitioners you have and whether you want to host it yourself. You will get a concrete answer, not a sales funnel.

Request an instance for your organisation